SOC Team Lead

Reference: zbmicuq43thcyqd6g23j

We are seeking an experienced SOC Team Lead to oversee the effective operation of a security operations function and support the delivery of a high-quality cyber security monitoring and incident response service. This is an opportunity to lead a skilled team in identifying, investigating and responding to threats across a complex technology environment.

You will provide day-to-day leadership, direction and mentoring to SOC analysts, helping to develop capability, maintain professional standards and promote a collaborative, security-focused culture. You will coordinate workloads, manage escalations and ensure that incidents are handled promptly, consistently and in line with agreed procedures and service levels.

Key responsibilities will include overseeing security monitoring and alert triage, reviewing incident investigations, validating escalations and supporting timely containment and remediation. You will contribute to the development and continual improvement of use cases, playbooks, detection rules and operating procedures. The role will also involve producing management information, analysing trends, identifying areas for improvement and communicating security risks clearly to technical and non-technical stakeholders.

You will work closely with infrastructure, engineering, risk and governance teams to support effective incident management and the ongoing improvement of security controls. You may also assist with threat hunting, vulnerability-related investigations, security tooling enhancements and post-incident reviews.

The successful candidate will have substantial experience within a Security Operations Centre, cyber security or incident response environment, including experience leading or supervising analysts. You will have a strong understanding of security monitoring principles, incident response processes, SIEM platforms, endpoint detection and response tools, threat intelligence and common attack techniques. Relevant industry certifications, such as CISSP, CISM, GCIA, GCIH or equivalent, would be advantageous.

You will be an organised and confident communicator with strong analytical and decision-making skills. The ability to remain calm under pressure, prioritise competing demands and explain complex technical issues clearly is essential. A proactive approach to coaching, continuous improvement and maintaining current knowledge of the evolving threat landscape will be highly valued.

COMPETITIVE SALARY
Added 27/10/2026
Reference: zbmicuq43thcyqd6g23j

Other similar jobs

SOC Team Lead

Added 27/10/2026

We are seeking an experienced SOC Team Lead to manage and develop a security operations function within a fast-paced, technology-focused environment. This is an excellent opportunity for a hands-on cybersecurity professional who can provide technical leadership, strengthen operational processes and support the ongoing development of a capable security monitoring team. You will lead the day-to-day operation of the Security Operations Centre, ensuring effective monitoring, triage, investigation and response to security events. The role will involve coordinating analysts, managing escalations and maintaining clear communication with internal stakeholders during incidents. You will also contribute to shift planning, workload allocation, performance management and...

Learn more

Support Team Lead - IAM

Added 24/09/2026

We are seeking a Support Team Lead – IAM to oversee the delivery of reliable, secure, and customer-focused identity and access management support. In this role, you will lead a team responsible for resolving access-related incidents and service requests, maintaining operational standards, and ensuring that users receive timely support across a range of IAM services. You will act as a senior escalation point for complex issues involving authentication, authorisation, account provisioning, single sign-on, multi-factor authentication, and privileged access. Your responsibilities will include coordinating daily workload, monitoring service performance, prioritising incidents, and ensuring that agreed service levels and quality standards are...

Learn more

Support Team Lead - IAM

Added 24/09/2026

We are seeking an experienced Support Team Lead – IAM to lead the day-to-day delivery of high-quality identity and access management support. In this role, you will coordinate a team responsible for resolving access-related incidents, service requests and fulfilment tasks across a complex technology environment. You will act as an escalation point for challenging issues, ensuring timely resolution, clear communication and adherence to agreed service levels. The role will also involve monitoring team performance, allocating workloads, maintaining operational coverage and supporting a culture of continuous improvement. Your responsibilities will include overseeing user provisioning and deprovisioning, access reviews, role and entitlement...

Learn more

Identity & Access Management Team Lead

Added 22/09/2026

We are seeking an experienced Identity & Access Management (IAM) Team Lead to oversee the delivery, operation and continuous improvement of identity services across a complex technology environment. You will lead a team of IAM specialists and work closely with information security, infrastructure, applications, risk, compliance and business stakeholders to ensure secure, reliable and user-focused access to systems and data. Your responsibilities will include setting the team’s priorities, managing workloads and supporting the professional development of team members. You will provide technical leadership across identity lifecycle management, joiner-mover-leaver processes, access provisioning, privileged access management, authentication, single sign-on, role-based access control...

Learn more

SAP Security Architect and Team Lead

Added 22/09/2026

We are seeking an experienced SAP Security Architect and Team Lead to design, implement and govern secure SAP environments across a complex enterprise landscape. This role will provide architectural leadership for SAP security, identity and access management, ensuring that solutions support business needs while meeting internal controls, regulatory obligations and industry best practice. You will work closely with technology, risk, audit and business stakeholders to define security strategies, establish standards and drive continuous improvement across SAP platforms. Key responsibilities will include developing SAP security architecture and roadmaps; designing role concepts, authorisations and segregation-of-duties controls; overseeing user lifecycle management, privileged access...

Learn more

Security, Culture, Education & Awareness Team Lead

Added 18/09/2026

We are seeking a Security, Culture, Education & Awareness Team Lead to develop and deliver a comprehensive security culture and awareness programme across a complex organisation. This role will help strengthen security behaviours, improve understanding of risk, and ensure that colleagues at all levels are equipped to protect information, systems, people and services. You will lead a small team and work closely with security, technology, people, communications, risk and business teams to embed security into everyday decision-making. Your responsibilities will include creating and maintaining a strategic security education and awareness plan, informed by organisational priorities, emerging threats, regulatory expectations and...

Learn more

Identity & Access Management Team Lead

Added 08/09/2026

We are seeking an experienced Identity & Access Management (IAM) Team Lead to provide technical leadership and operational oversight across the organisation’s identity services. You will lead a team responsible for the secure and efficient management of user identities, access rights and authentication technologies, ensuring services are reliable, compliant and aligned with business requirements. This is an opportunity to shape IAM practices, improve service delivery and support the continued development of a robust security environment. Key responsibilities will include leading, coaching and developing the IAM team; setting priorities and managing workload; and overseeing the full identity lifecycle, including joiner, mover...

Learn more

SOC Engineer - Security Operations Centre (SOC)

Added 23/10/2026

We are seeking a SOC Engineer to join a security operations function responsible for protecting critical systems, applications and data. This is an opportunity to work in a fast-paced environment, supporting the detection, investigation and response to cyber security incidents while helping to strengthen the organisation’s overall security posture. You will monitor security alerts and events across the environment, investigate suspicious activity and assess potential threats using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and vulnerability management tools. You will triage incidents, determine their severity and impact, and coordinate appropriate containment, eradication and recovery...

Learn more

Red Team Operator (Cyber Resilience)

Added 03/11/2026

Red Team Operator (Cyber Resilience) We are seeking an experienced Red Team Operator to help assess and strengthen the resilience of critical technology, systems and services. You will plan and deliver authorised adversary simulations, emulating realistic threat actors to identify weaknesses across people, processes, applications, infrastructure and physical environments. Working collaboratively with security engineering, threat intelligence, incident response and technology teams, you will develop threat-informed scenarios based on current tactics, techniques and procedures. Your responsibilities will include reconnaissance, vulnerability validation, social engineering, exploitation, privilege escalation, lateral movement, command and control, and the safe assessment of detection and response capabilities. Activities...

Learn more

Red Team Operator (Cyber Resilience)

Added 03/11/2026

We are seeking a Red Team Operator (Cyber Resilience) to challenge and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber attacks. You will plan and deliver authorised red team, adversary simulation and purple team engagements across people, processes, applications, infrastructure and cloud environments. Working with security operations, technology, risk and resilience teams, you will emulate realistic threat actors using intelligence-led techniques. Your responsibilities will include defining engagement objectives and rules of engagement, developing attack scenarios, conducting reconnaissance, identifying and exploiting weaknesses, and safely demonstrating potential business impact. You will maintain a strong focus on...

Learn more

Red Team Operator (Cyber Resilience)

Added 03/11/2026

As a Red Team Operator (Cyber Resilience), you will help assess and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber threats. Working as part of a collaborative security function, you will plan and deliver authorised adversary simulation exercises that test people, processes and technology across a range of scenarios. Your responsibilities will include developing realistic attack plans based on current threat intelligence, conducting red team and purple team activities, and emulating the tactics, techniques and procedures used by relevant threat actors. You will assess controls across networks, cloud environments, applications, endpoints, identity services and...

Learn more

Red Team Operator (Cyber Resilience)

Added 03/11/2026

We are seeking a Red Team Operator (Cyber Resilience) to help assess and strengthen the resilience of critical systems, services and people against realistic cyber threats. You will plan and deliver authorised red team and threat emulation exercises, working across infrastructure, cloud, applications, identities, networks and physical environments where appropriate. Your work will support the identification of weaknesses that could affect confidentiality, integrity, availability and operational continuity. Responsibilities will include developing exercise plans and rules of engagement; conducting reconnaissance, initial access, privilege escalation, lateral movement, persistence and exfiltration simulations; and safely testing detection, response and recovery capabilities. You will use...

Learn more

Red Team Consultants – Managing, Principal & Executive Principal

Added 30/10/2026

Red Team Consultants are sought at Managing, Principal and Executive Principal levels to lead and deliver sophisticated security assessments for a diverse range of clients. You will help organisations identify, understand and reduce their exposure to real-world cyber threats by combining technical expertise, creative thinking and strong communication skills. Depending on seniority, responsibilities will include planning and conducting red team operations, adversary simulations, penetration tests and physical or social engineering assessments. You will be expected to develop realistic attack scenarios, perform reconnaissance, exploit weaknesses, demonstrate business impact and produce clear, evidence-based reports. You may also support incident response exercises, threat-led...

Learn more

Red Team Consultants – Managing, Principal & Executive Principal

Added 30/10/2026

Red Team Consultants are sought at Managing, Principal and Executive Principal levels to lead and deliver sophisticated security assessments for a diverse range of clients. These roles involve emulating realistic adversaries to identify weaknesses in people, processes and technology, while providing clear, practical guidance that helps organisations improve their resilience. Depending on seniority, responsibilities will include planning and managing red team engagements, defining rules of engagement, developing attack scenarios, conducting reconnaissance, exploiting vulnerabilities and assessing detection and response capabilities. You will use a broad range of techniques across infrastructure, cloud environments, applications, identity platforms, physical security and social engineering, while...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.